CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC de Control de Acceso Insuficiente de DNN: la subida de imágenes permite sobrescribir contenido del sitio Soy un hombre sencillo, veo cvss:10/10 y entro xD Vi este nuevo CVE CVE-2025-64095: Control de Acceso Insuficiente de DNN: la...

CVE-2026-105848

The @payloadcms/plugin-stripe component within the Payload headless content management system is vulnerable to insufficient access control in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . An authenticated user capable of reaching the enabled optional Stripe REST proxy can pe...

throttlestop-exploit-rw

Physical Memory Mapper 研究工具，通过虚拟地址到物理地址的转换结合脆弱驱动程序利用，演示物理内存访问。 概述 本项目探索了底层 Windows 内存管理，结合 superfetch 技术进行地址转换和基于 IOCTL 的物理内存访问。旨在理解内核模式/用户模式交互以及内存子系统内部机制。 CVE-2025-7771 – ThrottleStop.sys 物理内存读写 漏洞摘要 CVE ID： CVE-2025-7771 组件： ThrottleStop.sys（来自 TechPowerUp LLC 的已签名驱动） 受影响版本： ThrottleStop 3.0.0....

CVE-2021-21551

CVE-2021-21551 EoP del controlador Dell CVE-2021-21551 Descripción El controlador dbutil23.sys de Dell contiene una vulnerabilidad de control de acceso insuficiente que puede provocar una escalada de privilegios, una denegación de servicio o una divulgación de información. Se requiere acceso de...

Rocky Linux 9 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2025_7043)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257043 advisory. microcodectl: Improper input validation in UEFI firmware CVE-2024-28047 microcodectl: Insufficient granularity of access control in UEFI firmware...

CVE-2026-12265

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

EUVD-2026-88237

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

CVE-2026-12265 Missing Authorization on HA Failover Config allows Complete Data Destruction

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

CVE-2026-12265

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to an insufficient access control flaw in the HA failover endpoint . This vulnerability allows an attacker to perform destructive PostgreSQL database operations , potentially leading to complete data destruction. The vulnerabil...

CVE-2026-12265 Missing Authorization on HA Failover Config allows Complete Data Destruction

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-16004

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security...

CVE-2026-16003

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS...

CVE-2026-16003

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-16004: Exposed IOCTL with Insufficient Access Control

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security...

PT-2026-86976

Name of the Vulnerable Software and Affected Versions ASUS Armoury Crate affected versions not specified Description Insufficient access control in an exposed IOCTL Input/Output Control allows a local user to bypass driver authentication. This enables the user to read from and write to the PCIe...

CVE-2026-16003: Exposed IOCTL with Insufficient Access Control

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS...

CVE-2026-78216: Insufficient Granularity of Access Control

AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation list, min, max, first, sum, avg that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned records...